45 current 2025-10-06 15:34:13 25.05.20251001.5b5be50 6.12.49 *
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
# flake for blakes nixos config
|
||||
# define new devices in outputs
|
||||
# generation: 42 current 2025-10-06 15:02:37 25.05.20251001.5b5be50 6.12.49 *
|
||||
# generation: 45 current 2025-10-06 15:34:13 25.05.20251001.5b5be50 6.12.49 *
|
||||
{
|
||||
description = "blakes nix config";
|
||||
inputs = {
|
||||
|
||||
@@ -48,8 +48,10 @@ in
|
||||
|
||||
# reverse proxy entryo
|
||||
services.nginx.virtualHosts."media.blakedheld.xyz" = {
|
||||
enableACME = false;
|
||||
forceSSL = true;
|
||||
enableACME = true;
|
||||
sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
|
||||
sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
|
||||
locations."/" = {
|
||||
proxyPass = "http://127.0.0.1:8096";
|
||||
};
|
||||
|
||||
@@ -35,6 +35,14 @@ in
|
||||
group = "root";
|
||||
neededForUsers = true;
|
||||
};
|
||||
"ssl_blakedheld_crt" = lib.mkIf config.users.blake.enable {
|
||||
owner = "root";
|
||||
group = "root";
|
||||
};
|
||||
"ssl_blakedheld_key" = lib.mkIf config.users.blake.enable {
|
||||
owner = "root";
|
||||
group = "root";
|
||||
};
|
||||
|
||||
};
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user